4. Now we need to configure the relevant permissions for this new service account.
   Select the following role: BigQuery Job User (you will need to grant read access to specific datasets later).

5. The last step is optional, skip it and press done.
